... and had seen the thread, which stated around 256MB per gigabit interface. I ... misc@openbsd.org > Subject: PF Congestion and state table question > > Hi, > > After successfully ... , some sysctl parameters, top load and dmesg: > http://www.sjohnson.info/ ...

openbsd-misc - Steve Johnson - May 8 2008 - 18:19

... To: misc@openbsd.org Subject: PF Congestion and state table question Hi, After successfully ... . All the interfaces have the speed and duplex hardcoded at the switch and ... -si, some sysctl parameters, top load and dmesg: http://www.sjohnson.info/other/ ...

openbsd-misc - Thomas Althoff - May 8 2008 - 17:41

... the hints. I've replied the questions below. I was still wondering what ... I should look into tweaking? >> > > >>> CPU states: 0.2% user, 0.0% ... instantaneous reading at times, leading to congestion. > > >>> scrub all random-id fragment ...

openbsd-misc - Steve Johnson - May 9 2008 - 09:51

... between those didn't seem to affect the rate of the PF > congestion counter. I'm not sure ... inet.ip.ifq.*, especially len. teh question is wether you see bursts or ... -Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, ...

openbsd-misc - Henning Brauer - May 11 2008 - 19:31

... > want to bump your ipintrq length. > Yes, the congestion counter is what I meant. It's increasing ... , I've tried different values between 1000-3000 and values between those didn't seem to affect the rate of the PF congestion counter. Thanks

openbsd-misc - Steve Johnson - May 11 2008 - 13:04

... if it could be feasible with OpenBSD and >> better hardware? Even if we have to ... I know it's something very hardware demanding and even most >> enterprise class firewalls like ... various sysctl and PF options, we're still seeing some congestion on the ...

openbsd-misc - Steve Johnson - May 10 2008 - 08:29

... under that > type of traffic and with the present hardware? Are ... should look into tweaking? >> CPU states: 0.2% user, 0.0 ... reading at times, leading to congestion. >> scrub all random-id fragment ... try the 'set skip' anyway and see if it helps enough ...

openbsd-misc - Stuart Henderson - May 8 2008 - 19:13

... -10 14:33]: > Nice to know. We're currently far from reaching those packets per ... > sysctl and PF options, we're still seeing some congestion on the ... de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application ...

openbsd-misc - Henning Brauer - May 11 2008 - 00:44

... and had seen the thread, which stated around 256MB > per gigabit interface. I ... 1000 up to 2500, and although it > did reduce the congestion a lot, I ... Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application ...

openbsd-misc - Henning Brauer - May 8 2008 - 20:18

... know it's something > very hardware demanding and even most enterprise class firewalls like ... thousands of new sessions per second? They're high values.... I think the current ... PF is 750k packets per second and all PF's behaviour/performance will be ...

openbsd-misc - Jordi Espasa Clofent - May 10 2008 - 05:13

... cards can put into ipintrq in one > int. 3000 might still be not enough. watch net.inet.ip.ifq.*, > especially len. teh question is wether you see bursts or constant > pressure. Relating about that, I see: $ sysctl net.inet.ip.ifq net.inet.ip ...

openbsd-misc - Jordi Espasa Clofent - May 12 2008 - 03:44

... .se>: > I don't recall Henning's rule, search the archive something like X times > your number of nics. I completely misread this to mean "Hennings rule of misc is Search the archive X times your number of nics before posting your question."

openbsd-misc - nuffnough - May 15 2008 - 20:02

... enough. watch net.inet.ip.ifq.*, especially len. >> teh question is wether you see bursts or constant pressure. > > ... http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg ...

openbsd-misc - Henning Brauer - May 13 2008 - 05:57

... "Hennings rule of misc is Search the > archive X times your number of nics before posting your question." enc0, lo0 and pflog0 count as nics for the purposes of this rule. :) -- GDB has a 'break' ...

openbsd-misc - Chris Kuethe - May 15 2008 - 20:11

> that's the CURRENT lenand almost always 0, becuase if it is not, we > don't switch to userland for sysctl to show it... So, I understand it's a right value. >> Note that net.inet.ip.ifq.maxlen=1024 means that I've 4 NICs (em (4)based) >> in

openbsd-misc - Jordi Espasa Clofent - May 13 2008 - 08:01

... because it's good for you :) -- Henning Brauer, hb@bsws.de, henning@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam

openbsd-misc - Henning Brauer - May 13 2008 - 11:00